SecuriteInfo[.]com[.]Win32[.]AdwareX-gen[.]2281[.]29362

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Win32.AdwareX-gen.2281.29362
Size

196KB
MD5

9d9579c3727d2b5b4c2d8104244a5413
SHA1

74b73ea7d796f7df1702b92e35cba859865f8ebb
SHA256

6b48bd376bb7bc8120a6fcccc00346632408d890460dc5daf8c022f6374e0c78
SHA512

f80861cef907e8ab637ea60a0bb3644debc15055aa331f63dfddb12cfa74bb3ff8996d45e5c82c3e70cece47fefbf8fcbfe8c11c7fd976eded3448f89b1d0736
SSDEEP

6144:FC/KpKxaJCUcRTBLohIpZdwAAznGLPWnREM8:FCPaUUcBZXBUK9M8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.AdwareX-gen.2281.29362

Files

SecuriteInfo.com.Win32.AdwareX-gen.2281.29362
.exe windows:6 windows x86

c525e31544d0d2c7c42fd6d6f3b56727

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetCandidateListW
ImmGetIMCLockCount
ImmGetCandidateListCountA
ImmUnregisterWordA
ImmGetRegisterWordStyleA
ImmUnlockIMC
ImmEnumRegisterWordW

shlwapi

StrCmpNW

kernel32

SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
EnumTimeFormatsW
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
CloseHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleW
HeapSize
CreateFileW
GetProcessHeap
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
FreeLibrary
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
WriteConsoleW

shell32

SHEmptyRecycleBinW
SHFormatDrive
ExtractIconEx

wsnmp32

ord102
ord501
ord603
ord400
ord503
ord902

rtutils

RouterLogDeregisterA
LogEventW
LogErrorA
TraceGetConsoleA
RouterLogEventStringW
TraceDumpExA

mswsock

rexec
dn_expand
GetAcceptExSockaddrs
GetNameByTypeW
s_perror
SetServiceW

rtm

RtmBlockDeleteRoutes
RtmDequeueRouteChangeMessage
RtmGetNetworkCount
RtmBlockSetRouteEnable
RtmEnumerateGetNextRoute

ole32

GetHGlobalFromStream
CreateObjrefMoniker
HPALETTE_UserMarshal
OleCreateLink
OleSetAutoConvert

gdi32

EndPath
PolyPolygon
RemoveFontMemResourceEx
GetFontAssocStatus
GetBitmapBits

oleaut32

VarI1FromStr
VarSu
VarDecSu
VarCyFromUI1
DispCallFunc
VarAnd

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yak
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c525e31544d0d2c7c42fd6d6f3b56727

Headers

DLL Characteristics

File Characteristics

Imports

imm32

shlwapi

kernel32

shell32

wsnmp32

rtutils

mswsock

rtm

ole32

gdi32

oleaut32

Sections

.text Size: 134KB - Virtual size: 133KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 4KB - Virtual size: 7KB

.yak Size: 8KB - Virtual size: 7KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 134KB - Virtual size: 133KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 4KB - Virtual size: 7KB

.yak
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 7KB - Virtual size: 6KB